78a72dd9e41aa5cce21a4e37b49b0d03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78a72dd9e41aa5cce21a4e37b49b0d03_JaffaCakes118
Size

104KB
MD5

78a72dd9e41aa5cce21a4e37b49b0d03
SHA1

abe7450fef62833e9028377ad257fcb2393b6164
SHA256

73ce9762951142c5663d3bfc814a6340b752795dc5e4b5411538f35b09014af8
SHA512

a1be3d2798881122426a992314d54ef04ab3b818f26456aac86495ccb7c26dc946d6bffe8a86f7ac3c2f2793cc3e31ccefc77bc0758a0a3a066fb66ad36a418e
SSDEEP

1536:ZHGCWPqp2jgZlurzQ3M897FrmZmNsU1Y5dqlDdsfCNuTyPV5Gn5CNjjqDI8RqiTU:ZHKqpEgZlI8mZAsLkuOPPV45C8I8IG47

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a72dd9e41aa5cce21a4e37b49b0d03_JaffaCakes118

Files

78a72dd9e41aa5cce21a4e37b49b0d03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 76KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE